Security · Do this early

Keeping crypto safe — self-custody for Nigerian users

Not your keys, not your coins is a slogan, but Nigerian users have learned it the expensive way through platform failures. This is the practical version: what a seed phrase actually is, where to keep it, when to move off an exchange, and how to build a setup that survives a lost or stolen phone.

Seed phrase rulesMove-off thresholdHot vs coldSIM-swap defence

Why this matters more in Nigeria

Self-custody advice usually rests on hypotheticals. In Nigeria it rests on history. Users of local platforms have had balances frozen and converted during a restructuring; global platforms have withdrawn naira services with limited notice; and the accounts holding the naira leg are subject to liens that arrive without warning.

None of those events can touch coins held in a wallet whose keys you control. That is the whole argument.

What a seed phrase actually is

When you create a self-custody wallet it generates 12 or 24 words. Those words are the wallet. They mathematically derive every private key, and therefore every address and every balance, that wallet will ever have.

This meansConsequence
Anyone with the words has the fundsNot "can access" — has. Instantly, from anywhere, irreversibly.
Losing the words loses the fundsThere is no reset, no support desk, no recovery. Nobody else has a copy.
The phone is not the walletLose the phone, restore the phrase on a new one, and the funds are there.
The password is not the phraseAn app PIN protects that installation. The phrase overrides everything.

The rules, with no exceptions. Never type your seed phrase into any website. Never photograph it. Never store it in WhatsApp, email, Google Docs, Notes, or your phone's gallery. Never give it to "support". Never enter it to claim an airdrop. Never read it aloud on a call. If anyone has it, the funds are already gone.

How to actually store it

MethodVerdictNote for Nigeria
Written on paper, stored privatelyGood — the baselineTwo copies in two separate places. Paper is vulnerable to water and fire, so think about where.
Stamped or engraved on metalBestSurvives flood and fire. Worth it above a few million naira.
Split across two locationsGood for larger sumsHalf the words each. Requires discipline about which half is which.
Hardware wallet plus a written backupBest for large balancesSee hardware wallets in Nigeria
Password managerAcceptable, not idealBetter than a photo, worse than paper. Only with a strong master password and 2FA.
Photo on your phoneNeverGallery backups sync to the cloud. A cloud breach is a wallet breach.
In a chat with yourselfNeverCommon, and it is how a stolen phone becomes a stolen wallet.
Typed into any websiteNeverThis is the single most common total loss.

Then test the backup. Write the phrase down, delete the wallet from your phone, and restore it from the paper. Do this while the balance is small. An untested backup is not a backup — it is a hope, and people discover it was wrong at the worst possible moment.

When to move off the exchange

Keeping coins on an exchange is not always wrong. It is wrong for the wrong money.

AmountWhere it belongsWhy
Under ₦100,000Exchange is fineConvenience outweighs the risk; you are still learning
₦100,000 – ₦1,000,000Mobile wallet you controlTrust Wallet or similar; free, and removes platform risk
₦1,000,000 – ₦10,000,000Hardware walletA Ledger or Trezor costs a fraction of the balance it protects
Above ₦10,000,000Hardware wallet, metal backup, split storageTreat it like the asset it is
Money you are actively tradingExchangeYou cannot trade from cold storage. Keep only the working amount there.

Hot and cold, and the right mix

Hot wallet (phone or browser)Cold wallet (hardware)
Keys liveOn an internet-connected deviceOn a device that never connects
ConvenienceHighLow by design
CostFreeRoughly ₦100,000–₦300,000 imported
Main riskPhone malware, a fake app, a drainer siteLosing the device and the backup
Use forSpending money, small balances, DeFiLong-term savings you will not touch

A sensible Nigerian setup: the working amount on a licensed exchange, a mobile wallet for day-to-day balances, and a hardware wallet for anything you intend to keep for years. Details in how to create a wallet and hardware wallets in Nigeria.

Securing the exchange side properly

  1. Authenticator app, never SMS

    SIM-swap fraud — where an attacker convinces a network to reissue your SIM — is a real Nigerian risk, and it defeats SMS 2FA completely. Use Google Authenticator or Authy and save the backup codes offline.

  2. A unique password, from a manager

    Reused passwords mean one unrelated site's breach becomes an exchange breach.

  3. Withdrawal address whitelisting

    The single most effective exchange setting. Even a fully compromised account cannot send funds to a new address.

  4. An email address used for nothing else

    Account recovery runs through email. If your email is compromised, everything is.

  5. Anti-phishing code, where offered

    Sets a phrase that appears in every genuine email from the platform, so a fake is obvious.

  6. Revoke API keys you are not using

    An old key given to a "trading bot" is a standing permission to move your funds.

  7. Set a device PIN and disable notification previews

    So a stolen phone does not show 2FA codes on the lock screen.

The Nigerian threat list, ranked by how often it actually happens

ThreatDefence
1. Seed phrase given away — to a fake app, a fake support agent, a fake airdropThe phrase never leaves paper. No exceptions.
2. Fake app installed from an APK or a Telegram linkOfficial store only
3. Ponzi or fake platformThe five-minute check
4. SIM swap defeating SMS 2FAAuthenticator app; a network-level port lock if your provider offers one
5. Platform failure or freezeSelf-custody above the threshold
6. Phone stolenDevice PIN, app PIN, seed phrase stored elsewhere
7. Bank account lien from a P2P counterpartyDedicated low-balance trading account
8. Physical coercionDo not discuss holdings publicly. Consider a small decoy wallet.

Note the ranking. The top three are all about being persuaded to hand something over, not about being hacked. Nigerian crypto losses are overwhelmingly social, not technical — which means the defence is a set of rules you follow when someone is being persuasive, not better software.

The plan nobody makes

If you hold meaningful crypto, ask what happens if you are unreachable tomorrow. Self-custody means no institution can help your family; if nobody can find or read the phrase, the funds are gone permanently.

A workable approach without compromising security today: keep a sealed written record of where the backup is and how the wallet works — not the phrase itself — with a trusted person or your lawyer. Tell one person that the record exists. And whatever you decide, write it down: this is the most common way genuinely long-term Nigerian holdings are lost, and it is entirely preventable.

Frequently asked questions

What is a seed phrase and why does it matter?

The 12 or 24 words a self-custody wallet generates when you create it. Those words mathematically derive every private key and address the wallet will ever have — so anyone who has them has your funds, and losing them loses your funds permanently. There is no reset and no support desk.

Where should I store my seed phrase?

Written on paper, in two copies, in two separate private locations — or stamped on metal for larger balances. Never a photo, never in WhatsApp or email or Notes, never typed into any website. Then test the backup by restoring the wallet from it while the balance is still small.

When should I move crypto off an exchange in Nigeria?

Above roughly ₦100,000 a mobile wallet you control is worth the small effort; above ₦1,000,000 a hardware wallet costs a fraction of what it protects. Keep only money you are actively trading on the exchange.

Is SMS two-factor authentication safe in Nigeria?

No. SIM-swap fraud, where an attacker has your number reissued to their SIM, defeats SMS 2FA entirely and is a genuine Nigerian risk. Use an authenticator app and store the backup codes offline.

What is the most common way Nigerians lose crypto?

Handing over a seed phrase — to a fake app, a fake support agent or a fake airdrop claim. The top causes of loss are social rather than technical, which is why the defence is a set of rules you follow when someone is being persuasive.

Do I need a hardware wallet?

Not for small balances. Above roughly ₦1,000,000 the cost of a Ledger or Trezor is a small fraction of what it protects, and it removes both platform risk and phone-malware risk in one purchase.

What happens to my crypto if I die?

Nothing, unless you planned for it — no institution can help your family and no one can recover the phrase. Keep a sealed record of where the backup is and how the wallet works, not the phrase itself, with a trusted person or your lawyer, and tell one person it exists.

Last reviewed: 2026-09-09. We update this page whenever Nigerian rules, fees or platform availability change. Nothing here is financial, tax or legal advice — see our editorial policy.

Open a CEX.IO account in 5 minutes

Licensed exchange supporting NGN, BVN/NIN KYC and instant naira-to-USDT conversion.

Start with CEX.IO →